diff options
| author | Patrick McDermott <patrick.mcdermott@libiquity.com> | 2020-08-09 16:51:31 (EDT) |
|---|---|---|
| committer | Patrick McDermott <patrick.mcdermott@libiquity.com> | 2020-08-09 16:51:31 (EDT) |
| commit | e3bc617e20ab69d4c0285f33eac4fc64afcaae86 (patch) | |
| tree | 445531419aecf464548d51dc03c315cad1ad98de /README | |
| parent | 88bf8172ee60504b9d8bd6d2b337097d3cb9aa32 (diff) | |
Diffstat (limited to 'README')
| -rw-r--r-- | README | 51 |
1 files changed, 2 insertions, 49 deletions
@@ -1,52 +1,5 @@ Unofficial wolfSSL Utility -------------------------- -wolfutil is a command-line tool for the wolfSSL embedded (SSL/)TLS -library. It is similar to the OpenSSL command-line tool, providing only -a limited `s_client` TLS client command. The primary goal is to provide -enough functionality for use by BusyBox's wget applet. - -wolfutil's `s_client` command is designed to be stronger by default than -OpenSSL's, as the latter is only meant to be a "diagnostic tool". That -is, the following command: - - $ wolfutil s_client -quiet -connect ${host}:${port} \ - > -servername ${servername} - -is roughly equivalent to the more complicated: - - $ openssl s_client -quiet -connect ${host}:${port} \ - > -servername ${servername} -verify 9 -verify_return_error \ - > -no_ssl3 -no_tls1 -no_tls1_1 - -This utility is in no way authored by or affiliated with wolfSSL Inc. or -its contributors. - -Recommended wolfSSL Configuration ---------------------------------- - -Building wolfSSL with the following configuration options (keeping other -defaults) is recommended for wolfutil to perform as a strong modern TLS -implementation: - - --enable-maxstrength - --disable-aescbc - --disable-oldtls - --disable-md5 - --enable-ocsp - --enable-ocspstapling - --enable-ocspstapling2 - --enable-sni - -The test suite is written to verify the strength of wolfutil linked -against wolfSSL configured with these options. - -Copyright ---------- - -Copyright (C) 2019 Libiquity LLC - -Copying and distribution of this file, with or without modification, -are permitted in any medium without royalty provided the copyright -notice and this notice are preserved. This file is offered as-is, -without any warranty. +wolfssl-util has been renamed to wolfutil, and its Git repository has been moved +to <http://git.proteanos.com/wolfutil/wolfutil.git/>. |